This page holds the location of my kernel research that was presented at Defcon 34 in the Malware village!
This is a BYOVD framework, so you would be able to just swap out the code required to communicate with your driver, and then all the attacks will function! It’s designed for attacking Windows kernel under VBS. Please read more in the github.
The following pages cover the different code execution methods that I have developed in greater detail.
https://nathan2.com/posts/remap/
https://nathan2.com/posts/trap/
https://nathan2.com/posts/jop/
There is no recording of this talk, however the slides are available here in pdf format. The background for the talk is the Windows 11 blue screen of death (black screen of death now).
https://nathan2.com/files/ROPKIT.pdf
And in pptx format with working videos:
https://nathan2.com/files/ROPKIT.pptx
The github with the rootkit is here: